# Precursor Security

> Precursor Security is a CREST-accredited UK cyber security firm founded in 2018, headquartered in Leeds. We deliver offensive security (penetration testing, red team operations), defensive security (24/7 managed SOC, MDR, incident response), and compliance services under one roof. One of fewer than 70 organisations globally to hold both CREST Penetration Testing and CREST SOC accreditations.

## Services: Offensive Security
- [Penetration Testing](https://precursorsecurity.com/services/offensive-security/penetration-testing): CREST-accredited penetration testing from £2,500 — network, web app, cloud, API, mobile, and more. Fixed pricing, free scoping call.
- [Web Application Penetration Testing](https://precursorsecurity.com/services/offensive-security/web-application-penetration-test): Manual web application and API security testing aligned to OWASP Top 10 and CREST methodology.
- [Red Team Operations](https://precursorsecurity.com/services/offensive-security/red-team-operations): Full-scope intelligence-led adversarial simulations testing people, processes, and technology against realistic threat actors.
- [Social Engineering](https://precursorsecurity.com/services/offensive-security/social-engineering): Phishing simulations, vishing, and physical intrusion testing to validate employee awareness and physical security controls.
- [Mobile Application Penetration Testing](https://precursorsecurity.com/services/offensive-security/mobile-application-penetration-test): iOS and Android security assessments for native, hybrid, and web-based mobile applications.
- [OT/IoT Security Assessment](https://precursorsecurity.com/services/offensive-security/ot-iot-security-assessment): Security testing for operational technology and IoT environments.

## Services: Defensive Security
- [Security Operations Centre (SOC)](https://precursorsecurity.com/services/defensive-security/security-operations-centre): CREST-accredited 24/7 UK-based SOC providing continuous monitoring, detection, and response. Staffed by human analysts, not just automated tools.
- [Managed Detection and Response (MDR)](https://precursorsecurity.com/services/defensive-security/managed-detection-response-mdr): Fully managed MDR starting from £900/month. Combines SIEM, EDR, threat hunting, and human-led investigation.
- [Incident Response](https://precursorsecurity.com/services/defensive-security/incident-response): 24/7 incident response retainer and emergency services for ransomware, breaches, and active intrusions.

## Services: Compliance
- [Cyber Essentials Certification](https://precursorsecurity.com/services/compliance/cyber-essentials-certification): IASME-certified Cyber Essentials and Cyber Essentials Plus certification for UK organisations.
- [ISO 27001 Consultancy](https://precursorsecurity.com/services/compliance/iso-27001): Gap analysis, implementation support, and audit preparation for ISO 27001 certification.

## Company
- [About Precursor Security](https://precursorsecurity.com/about): Founded 2018. CREST-accredited for Penetration Testing and SOC. UK-based team, all staff DBS-checked.
- [Accreditations](https://precursorsecurity.com/accreditations): CREST (Penetration Testing + SOC), ISO 27001, Cyber Essentials, G-Cloud 14, CHECK.
- [Contact](https://precursorsecurity.com/contact): Leeds HQ: +44 113 486 4873 — info@precursorsecurity.com — Free scoping call available.

## Intelligence Library
- [Security Blog](https://precursorsecurity.com/blog): Free security guides, CVE advisories, incident response case studies, and compliance resources written by CREST-certified analysts.
- [Cyber Security Glossary](https://precursorsecurity.com/blog/cyber-security-glossary): A–Z definitions of cyber security terms, attack techniques, and industry concepts.

## Sectors
- [Financial Services](https://precursorsecurity.com/sectors/financial-services): Security services for banks, insurers, and fintech — FCA-aligned testing and monitoring.
- [Healthcare & NHS](https://precursorsecurity.com/sectors/healthcare): Cyber security for NHS trusts and healthcare providers including DSP Toolkit support.
- [Legal Sector](https://precursorsecurity.com/sectors/legal): Penetration testing and SOC services for law firms managing sensitive client data.

## Optional
- [Sitemap](https://precursorsecurity.com/sitemap): Full index of all pages on the Precursor Security website.
- [Privacy Policy](https://precursorsecurity.com/privacy): Data handling, retention, and GDPR compliance information.